Legal

Privacy Policy

Last updated: 17 October 2026

This policy explains how we handle personal data when you visit this website, send us an enquiry through the contact form, or contact us by email or WhatsApp. We only collect what we need to respond to you and to provide our services.

1. Who is responsible for your data

The controller of your personal data is:

KEFA, obrt, owned by Marija Erak and Lovre Erak
Šibenik, Croatia
Email: lovre0509@gmail.com
Phone / WhatsApp: +385 91 951 0187

Kefa Home Care is the name under which KEFA, obrt offers its property-care services.

2. What data we collect

• Contact form: your name, email address, the location of your property, the service you are interested in, your message, and your confirmation that we may use these details to reply.
• Email and WhatsApp: the details you choose to send us, such as your name, email address or phone number, and the content of your messages.
• Technical data: when you visit the website, our hosting provider automatically processes technical information such as your IP address, browser type and the time of your visit. This is needed to deliver the website securely.

Please do not send us sensitive information through the contact form. We will ask for any details we need, such as access arrangements for a property, once we have agreed to work together.

3. Why we use your data, and on what legal basis

• To answer your enquiry and prepare a proposal. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and your consent given in the contact form (Art. 6(1)(a) GDPR).
• To provide the services we agree on, including visit reports and photographs of your property. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• To keep the website running securely. Legal basis: our legitimate interest in a secure and working website (Art. 6(1)(f) GDPR).
• To meet legal obligations, for example keeping accounting records. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

We do not sell your data, use it for advertising or send newsletters.

4. Service providers who process data for us

We use a small number of trusted service providers. They process data only as needed to provide their services to us:

• Cloudflare, Inc.: website hosting and security (technical visit data).
• Formspree, Inc.: receives contact-form submissions and forwards them to us by email.
• Google (Gmail): our email service, where enquiries and emails are received.
• WhatsApp (Meta Platforms): only if you choose to contact us via WhatsApp.

Some of these providers are based in, or may process data in, the United States. Such transfers rely on safeguards recognised under the GDPR, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

5. How long we keep your data

If your enquiry does not lead to an agreement, we delete it no later than 12 months after our last contact with you. If we work together, we keep your data for as long as the service continues, and afterwards only as long as required by law, for example for accounting and tax purposes.

6. Cookies

This website does not use cookies for tracking, analytics or advertising, and it does not load fonts or other content from third-party servers while you browse.

7. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• request access to the personal data we hold about you;
• ask us to correct or delete your data;
• ask us to restrict how we use your data, or object to its use;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting anything we did before you withdrew it.

To use any of these rights, contact us at lovre0509@gmail.com. You also have the right to lodge a complaint with the Croatian data protection authority, the Agencija za zaštitu osobnih podataka (AZOP), azop.hr.

8. Changes to this policy

We may update this policy from time to time. The current version is always available on this page.